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this report as "originally filed " and are not annexed to this report since they do not contain amendments (Rules 70. 16 and 70,17). 
** Any replacement sheet containing such amendments must be referred to under item 1 and annexed to this report. 
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V. Reas ned statement under Article 35(2) with regard to novelty, inventive step r industrial sqiplicability; 
citati ns and explanations supporting such statement 

1. STATEMENT * 



Novelty (N) Claims M2 YES 

Claims NONE NO 

Inventive Step (IS) Claims 2-5, 10-13 YES 

Claims 1, 6-9 NO 

Industrial Applicability (lA) Claims YES 

Claims NONE NO 



2. CITATIONS AND EXPLANATIONS (Rule 70.7) 

Claims 1 lacks inventive step under PCT Article 33(3) as being obvious over Conradi (4.692,29S). Conradi teaches providing a 
control system to be tested, the control system having a controller-I/0 communicadon channel and field I/O connectors. Conradi 
teaches an analog process control system with a channel allowing information to be transmitted and received by the control system 
(col. 2, line 64 • col. 3. line 17). Conardi teaches providing a test system to the control system in a manner which allows the test 
system to communicate with and drive the control system by sending and receiving signals via both the controlier-I/O communicadon 
channel and the field I/O coimectors. Conradi teaches an analysis apparatus that communicates over the channel test signals and 
reads the response of the control system (col. 3. lines 12-49). Conradi does not teach communication between the test system and 
field I/O connectors. It would have been obvious to modify the test system taught by Conradi to communicate with field I/O 
coimectors because then control system response to signals on these I/O connectors could be tested. 

Claims 6-9 lack an invendve step under PCT Ardcle 33(3) as being obvious over Miller et al. (5,079,731). Miller teaches providing 
a control system to be tested, the control system having a controller-I/O communicadon channel and field I/O connectors. Miller 
teaches a process cu*itrol computer with process input/output hardware (Fig. 1, computer 12, hardware 16; col. 2, lines 54-61). 
miller teaches providing a test system to the control system in a manner which allows the test system to communicate with and drive 
the control system by sending and receiving signals via both the controller-I/O communication channel and the field I/O coimectors. 
Miller teach a simulation computer with simulator input output hardware in communication with the process control iI^)ut/ou^ut 
hardware (Fig. 1, simulator computer 18, simulator hardware 24; col. 2, lines 62-66). The simulator simulates inputs and outputs of 
a system that the process control computer would monitor and tests the response of the controller (col. 3, lines 9-50; Fig. 2; col. 4, 
lines 27>39). Miller does not teach coupling the test system to field I/O connectors. It would have been obvious to modify the test 
system taught by Miller to communicate with field I/O connectors because then control system response to signals on these I/O 
connectors could be tested. 

Claims 1 and 6-9 meet the criteria set out in PCT Article 33(4), because the process control validation would allow process 
controllers to more accurately control process such as power plants and chemical manufacturing. . 

Claims 2-5 and 10-13 the criteria set out in PCT Article 33(2)-(4), because the prior art does not teach or fairly suggest utilizing a 
portion of the test system to validate the operation of a control system. The prior art does not teach or fairly suggest providing a 
simulator coupled to the control system at three points including a sensor input port, an actuator output port and a point from which 
data relating to the internal state of the controller can be obtained. The prior art does not teach or fairly suggest a plant sensor and 
actuator simulator with a configurator for entering and maintaining databases containing information on test requirem^ts for the 
control system. The prior art does not teach or fairly suggest a method for training process operators that includes a plant with a 
human machine interface to a control system that is coupled to a simulator. 

NEW CITATIONS 

NONE 
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Once off-site/lab testing is complete, the SIMCart configurator/HMI 130 is datached 
from theSIMCart and target CS 20 and taken to the field to be used onsite to test target CS 20 
once it is installed in the drug production facility. In the field, the SIMCart configurator 
provides a field tester with a series of tests related to field I/O and wiring connections. For 
5 some tests, the field tester is prompted by the SIMCart configurator to instmct a technician, 
possibly via cell-phone, to input signals to the system which will be passed to target CS 20 
via the field wiring. The SIMCart configurator 130 then prompts the field tester to enter 
responses answering questions related to the feedback HMI 230 of target CS 20 provided to 
the tester in response to the technician's inputs. All test questions and results are stored so as 
10 to allow a report of test results to be generated. 

Second Example Application 

Once test target CS 20 is installed in the dmg production facility, SIMCart 10 can 
periodically be used to train process operators. Such training can be done on site, using the 
target CS 20 HMI by simply disconnecting target CS 20 from the plant's sensors and 

15 actuators, probably by disconnecting the field wiring, and connecting SIMCart 10 to target CS 
20 in place of the sensors and actuators. Once target CS 20 is operating with simulated I/O 
rather than live sensors and actuators, operators are free to interact with target CS 20 without 
any fear of consequences to the plant. When used in such a manner, the test procedures used 
to validate target CS 20 may be used in training operators, or else SIMCart 20 may 

20 incorporate specific software and/or data for training operators. Such software and/or data 
may incorporate multi-media presentations such as training videos. SIMCart 20 may also 
work partially or completely ind^endently of the operator so as to simulate events, track 
operator responses to the simulated events, and/or report on the quality of the operator's 
responses, without the operator having to interact with SIMCart 20 during training. 

25 Thus, specific embodiments and applications of devices and methods for plant control 

system testing have been disclosed. It should be apparent, however, to those skilled in the art 
that many more modifications besides those already described (including the methods shown 
in Figures 8-15) are possible without departing from the inventive concepts herein. The 
inventive subject matter, therefore, is not to be restricted except in the spirit of the appended 

30 claims. Moreover, in interpreting both the specification and the claims, all temis should be 
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CLAIMS 

What is claimed is: 

1 . A method of testing a plant control system comprising: 

providing a control system to be tested, the control system having a controUer-I/O 
commimication channel and field I/O connectors; 

providing a test system; 

coupling the test system to the control system in a manner which allows the test 
system to commmiicate with and drive the control system by sending and 
receiving signals via both the controUer-I/O communication channel and the field 
I/O connectors, 

2. The method of claim 1 fiirther comprising: 
decoupling the test system firom the control system; 

at least partially installing the control system in a plant to be controlled; 

utilizing at least a portion of the test system to validate the operation of the control 
system, 

3. The method of claim 2 wherein validation of the control system involves coupling an 
I/O portion of the test system in place of at least some of the plant's sensors and 
actuators. 

4. The method of claim 2 wherein vahdation is accomplished by the test system utilizing 
at least a portion of the test system to validate the operation of the control system by 
having the test system provide instractions and questions to one or more plant 
operators thereby instructing them to perform various operations and prompting them 
to enter a description as to how the control system responded to the operations, and 
recording any operator entered descriptions. 
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5. The method of claim 4 further comprising a step of causing the test system to generate 
. a report indicating which operations where performed and what the control system 

response was for any operations perforaied. 

6. A method for testing a plant control system comprising: 

providing a plant control system to be tested, the control system comprising 
a controller, 
a sensor input port, 
an actuator output port, 

a series of communication segments communicatively coupling the sensor input 
port to the controller such that an input signal applied to the sensor input 
results in one or more signals traveling along each of the commimication 
segments so as to notify the controller of the applied input signal, and 

a series of communication segments communicatively coupling the controller to 
the actuator output port such that a control signal generated by the controller 
results in an output signal being applied to the actuator output port; 

providing a simulator, the simulator coupled to the control system at at least three 
points, wherein a first point is the sensor input port, a second point is a point fi:'om 
which data relating to the internal state of the controller can be obtained, and a 
third point is the actuator output port; 

causing the simulator to apply a signal to the first point and to subsequently 

obtain data on the intemal state of the controller and to monitor the actuator output 
port for any applied signals. 
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7. The method of claim 6 with the control system further comprising an I/O interface 
- wherein coupling the simulator to the control system at the second point involves 

tying the simulator into a network used as a communication segment between the 
controller and the I/O interface. 

8. The method of claim 7 wherein the I/O interface comprises at least two analog/digital 
converters with a first, ii^^ut converter converting an analog input signal applied to the 
sensor input by the simulator or sensor into a digital signal which is transmitted to the 
controller; and a second, output converter converting a digital signal received by the 
I/O interface fi"om the controller into an analog signal which is transmitted to the 
simulator or actuator. 

9. The method of claim 8 wherein the simulator obtains data on the internal state of the 
controller by establishing a network connection with the controller and requesting that 
the controller report its intemal state. 

10. A plant sensor and actuator simulator for use in testing a plant control system 
comprising; 

a configurator having a computer and software for entering and maintaing one or more 
databases including validation requirements and associated test procedures, each 
test procedure comprising one or more tests, each test comprising at least one 
signal to be generated by the simulator and transmitted to the control system being 
tested, and at least one; 

a plurality of I/O simulator modules detachably coupled to the configurator, at least 
some of the I/O simulator modules comprising one or more A/D converters; 

communication channel connectors for commimicatively coupling the configurator via 
a configurator network interface port to a network of which the controller of a 
control system to be tested is a part; 

field I/O connectors for coupling the simulator to the field I/O connectors of a control 
sj^tem to be tested. 
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SIMULATOR CART 

This application claims the benefit of U.S. provisional application nximber 60/126060 
incorporated herein by reference in its entirety. 

5 Field of The Invention 

The field of the invention is test and simulator systems. 

Background of The Invention 

Control systems incorporating PLCs (Programmable Logic Controlers) and DCSs 
(Distributed Control Systems) are firequently used to control real world processes by 

10 accepting inputs which typically originate firom sensors such as, among others, those used to 
sense temperature, flow, level, radiation, light, movement, and pressure, and those used in 
generating outputs which are used to drive actuators such as hydraulic devices, valves, Ughts, 
and motors. Control systems can often be viewed as having a control component and an 
interface component, with one or both components having both hardware and software sub- 

15 components. Thus a PLC based device might utilize a digital PLC having embedded software 
as the control component (the "controller"), with an interface component (the "I/O interface") 
(a) accepting signals from sensors and converting them into a form acceptable to the PLC, 
and (b) accepting outputs from the PLC and converting them to signals suitable as inputs to 
the actuators. M such systems, the controller and I/O interface are often connected by one or 

20 more paths (the "controUer-I/O communication channel) to allow commxmication and control 
signals to pass between the controller and the I/O interface; Similarly, the I/O interface is, 
after the control system is installed in its operating environment, connected via one or more 
electrical paths (the "field wiring") to the components from which the control system receives 
its inputs, and to the components to which the control system directs its outputs, with the I/O 

25 interface being provided with a plurality of connectors ("field I/O connectors") which 

facilitate connecting the I/O interface with the field wiring. Many control systems will also 
incorporate a hxmian-machine-interface (HMT) component comprising hardware and or 
software for facilitating operator interaction with the control system. 



30 



Although methods and devices for testing control sj^tems are known, they generally 
have individual strengths and weaknesses which make them more appropriate in some 
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situations and less appropriate in other. Thus, there is a continuing need for improved 
methods and apparatus for control system testing. 

Summary of the Invention 

Methods and apparatus are provided which allow control systems to be tested. 
5 Specifically, a test system is coupled to a control system in a maimer which allows the test 
system to communicate with and drive the control system by sending and receiving signals 
via both the controUer-FO communication channel and the field I/O connectors. In essence, 
the test system is used to both simulate a plant to be controlled and to monitor, validate, and 
or modify the intemal state of the control system controller and possibly the control system 

10 I/O interface. Plant simulation is accomplished by simulating the 170 devices to which the 
control system is coupled (and hence the plant processes) when installed in its operational 
environment. In addition to the simulation of I/O devices, the test system takes advantage of 
the fact that many commonly used controller and I/O interfaces are capable of communication 
with other devices by using such communications ability to provide instmctions to or obtain 

15 information from a control system's controller(s) and I/O interface(s). 

It is contemplated that the methods and apparatus disclosed herein will provide an 
effective approach to connecting a control system to be tested to simulated I/O devices and 
controlling and monitoring the simulated I/O devices so as to produce inputs to the control 
system, to record outputs from the control system, and to compare the recorded outputs 
20 against an expected value and record the result of the comparison for reporting purposes. 

It is also contemplated that the methods and apparatus disclosed herein will provide 
an effective approach to the staging and testing of PLC/HMIs (Progranmciable Logic 
Controllers/Human Machine Interfaces) and DCSs (Distributed Control Systems) before 
dehvery to the field. 

25 It is also contemplated that the methods and apparatus disclosed herein will provide 

an effective mechanism for validating the operation of a control system once it has been 
installed in a plant to be controlled. 

Various objects, features, aspects and advantages of the present invention will become 
more apparent from the following detailed description of preferred embodiments of the 
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invention, along with the accompanying drawings in which Uke numerals represent like 
components. 

Brief Description of The Drawings 

Fig. 1 is a schematic view of a simulator cart embodying the invention. 

5 Fig. 2 is an altemative schematic view of the simulator cart of figure L 

Fig. 3 is a schematic view of a simulator coupled to a plant control system. 

Fig. 4A is a diagram of a preferred layout for components on a first side of a cart 
based simulator. 

Fig. 4B is a diagram of a preferred layout for components on a second side of the 
10 simulator of Fig. 4a 

Fig. 5 A is a wiring diagram illustrating a preferred method of interconnection for the 
components of the simulator of Fig. 4A. 

Fig. 5B is a wiring diagram illustrating a preferred method of interconnection for the 
components of the simulator of Fig. 4B. 

15 Fig. 6 is a diagram of a preferred layout for components in a *T>riefcase" based 

simulator. 

Fig. 7 is a screen capture of a simulator HMI screen wherein an operator is being 
prompted to select which test section to run. 

Fig. 8 is a screen capture of a simulator HMI screen wherein an operator is being 
20 prompted to select whether to run a particular test or an entire test procedure. 

Fig. 9 is a screen capture of a simulator HMI screen wherein an operator is being 
prompted to perform a first test. 

Fig. 10 is a screen capture of a simulator HMI screen wherein the operator is being 
prompted to enter the results of the test of Fig. 9. 
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Fig. 1 1 is a screen capture of a simulator HMI screen wherein an operator is being 
prompted to perform a second test. 

Fig. 12 is a diagram of a simulator HMI database table. 

Fig. 13 is a diagram of a simulator HMI database table. 

Fig. 14 is a diagram of a simulator HMI database table. 

Fig. 1 5 is a diagram of a simulator HMI database table. 

Fig. 16 is a diagram of a simulator HMI database table. 

Fig. 17 is a diagram of a simulator HMI database table. 

Fig. 18 is a diagram of a simulator HMI database table. 

Fig. 19 is a diagram of a first method embodying the invention. 

Fig. 20 is a diagram of a second method embodying the invention. 

Fig. 21 is a diagram of a third method embodying the invention. 

Fig. 22 is a diagram of a fourth method embodying the invention. 

Fig. 23 is a diagram of a fifth method embodying the invention. 

Fig. 24 is a diagram of a sixth method embodying the invention. 

Fig. 25 is a diagram of a seventh method embodying the invention. 

Detailed Description 

Referring to figures 1-3, a simulator cart test system ("SIMCart") 10 is coupled to a 
control system to be tested ("target CS") 20. SIMCart 10 includes rolling enclosure 110, I/O 
simulator modules 120, HMI/configurator 130, hardcopy device 140, wiring harnesses 150, 
and communication channel 160 connections 161 and 163. Target CS 20 includes enclosure 
210, I/O interfaces 220, field I/O connectors 225, HMI 230, conmnmication channel 160 
connections 261 and 263, and PLC 270. SIMCart 10 uses wiring harnesses 150 to send and 
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receive I/O signals to and from I/O interfaces 220 so as to simulate the input devices/sensor 
50 and output devices/actuators 40 which would be connected via the field wiring 41 and 51 
to target CS 20 when target CS 20 is installed. SIMCart 10 uses commimications channel 
160 to obtain register and status information from I/O interfaces 220, HMI 130 and PLC 270. 
5 By monitoring the internal state of and data flow between I/O interfaces 220, HMI 130 and^ 
PLC 270, SIMCart 10 is better able to isolate any problems which may occur in target CS 20 
during testing as occurring in a particular subsystem of target CS 20. The manner in which 
SIMCart 10 is coupled to target CS 20 also permits SIMCart 10 to test multiple I/O channels 
and or subsystems of target CS 20 simultaneously. 

10 The SIMCart is automatically initialized by utilizing communications channel 160 to 

query target CS 20 to obtain information which allows SIMCart 10 to perform automatic 
initiaUzation and mapping of its input and outputs to those of target CS 20. SIMCart 10 
incorporates a knowledge base which includes characteristics of known control system 
hardware and software components in performing such automatic initialization. It is 

15 contemplated that the knowledge base might be extended to include mathematical models of 
standard components such as sensors and actuators to allow SIMCart 10 to better simulate 
such components and to allow automatic test generation for target systems which Avill be 
coupled to such components. Figures 12-18 show some of the fields and data which might be 
used in maintaining such a knowledge base. 

20 SIMCart 1 0 is contemplated as being beneficial in the development and off-site 

testing of target CS 20 by simulating the plant which target CS 20 is intended to control. If 
the capacity of a single SIMCart 10 is insufficient to simulate an entire plant, multiple 
SIMCarts 10 can be used to achieve the simulation. Such a combination of SIMCarts 10 may 
utilize multiple HMI 130 devices, or may share a single HMI 130. SIMCart 10 is also 

25 contemplated as being beneficial for off-site training of personnel in the operation of target 
CS 20 when SIMCart 10 is used in conjunction with target CS 20. Such ofF-site use of 
SIMCart 10 is contemplated as providing, among others, complete testing of all target CS 20 
inputs and resulting outputs before field installation 

On-site testing is also contemplated as benefiting from the use of SIMCart 10, either 
30 in its entirety or only its configurator/HMI portion. Once target CS 20 is installed in its 
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operational environment, configurator 130 can be used as a test and validation tool. The 
configurator 130 can provide step-by step instructions to a field tester which, if followed, 
result in a desired level of testing of target CS 20. By doing so, configurator 130 essentially 
controls the test process through the field tester. By requiring feedback fi-om the field tester 
5 upon the completion of various portions of the testing, a test report which includes the tests 
steps performed and the tester responses can be generated so as to provide assurance that the 
required level of testing has be completed. Such "controlled" testing thus provides a method 
of repeatable, validated and verified testing. Configurator 130 can also be used to record the 
results of such testing and to generate reports in the field which provide feedback as to the 
10 current state of target CS 20 and the field wiring to which target CS 20 is coupled. 

If the entire SIMCart 10 is used on-site, SIMCart 10 can be interchanged with selected 
inputs and outputs of target CS 20 so as to allow "Uve" inputs to cause target CS 20 to 
control simulated actuator components, or to use simulated inputs to cause target CS 20 to 
control "live" actuator components, or to mix and match Uve and simulated inputs and 
15 outputs as desired. If configurator 130 is still attached to the rest of SIMCart 10 during 
testing, and if SIMCart 10 is coupled to target CS 20 during testing, configurator 130 can 
control the test process both through direct interaction with target CS 20 and through a test 
operator as previously discussed. 

Rolling enclosxare 1 1 0 of SIMCart 1 0 is preferred to be sized and dimensioned to 
20 house I/O simulator modules 120 and any necessary supporting systems in a manner which 
facilitates the use of SIMCart 10 and its interconnection with target CS 20. 

I/O simulator modules 120 may comprise PLCs or smart I/O systems. The SIMCart 
10 of figure 1 utiUzes several Sixnet I/O related products including ST-DI-024-16H, ST-PS- 
024-02N, ST-DO-DC2-16H, ST-AI-20M-16H, ST-AO-20M-08F, ST-DI-120-08U, ST-DO- 

25 AC1-08U, and ST-GT-ETH-24P. Details of the preferred Sixnet products are attached to the 
provisional appUcation as part of its disclosure, said provisional application having 
previoiusly been incorporated by reference herein. Figures 4A and 4B provide a diagram of a 
preferred layout of components in SIMCart 10, and Figures 5 A and 5B provide corresponding 
wiring diagrams showing a preferred method for intercoimecting the components of SIMCart 

30 10. 
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An alternative embodiment utilizes a smaller number of components so that a 
SlMCart type simulator can be fit within a carrying case. Figure 6 provides a diagram of a 
preferred layout of components in such an embodiment. 

HMI/configurator 130 of SIMCart 10 is contemplated as being a general purpose 
computer such as a laptop PC ("PC")- Portability is particularly desirable as it facilitates the 
transportation of HMI 130 into the field to support on-site testing of an installed target CS 
20. HMI 130 is contemplated as incorporating software which allows testing of alarm 
responses (including deadbands), loops, and logic, and reporting of HMI readouts, trend 
graphs, alarms, reports, system requirements, etc. Test results are stored in the form of 
textual date and time stamped data, graphs, and tester responses to prompted questions. 

In a preferred embodiment, HMI 130 includes a multi-tasking operating system, 
preferably Windows NT™, which is capable of supporting a graphical user interface ("GUT') 
and a relational database system (preferably Microsoft Access"^^, as well as software for 
controlling VO simulator modules 120, and testing target CS 20. HMI 130 is also preferred to 
include an Ethernet network interface card for connection to communication chaimel 160 
which is preferred to be an TCP/IP based Ethernet network. It is also preferred that HMI 130 
of SIMCart 10 be detachable from the rest of SIMCart 10 to allow it to be used independently 
as an onsite verification tool. 

HMI/configurator 130 provides for downloading test relational databases, initiating 
tests and capturing tester responses and comments, and generating reports. The test databases 
include test cases, expected results for test comparison and exception generation. An overall 
test planner database organizes the sequence of test events. Being as the test databases are 
derived from the requirements database, the system owner is assured of lock-step 
configuration control and traceable requirements testing. 

It is preferred that configurator 130 utilize a relational database coupled to a GUI to 
allow entry of and storage of test requirements at a high level, and to provide tools for 
deriving lower level sets of test instructions from such high level requirements in a manaer 
which maintains a correlation between lower level test sets and higher level requirements. By 
maintaining such a correlation, changes to high level requirements can be quickly, and 
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sometimes automatically, incorporated into the lower level test sets. Such lower level test 
sets will be used to drive and control both automatic and interactive testing of target CS 20. 
By maintaining a correlation between high level and low level requirements, reports showing 
the test steps used to verify satisfaction of the high level requirements through performance of 
5 the low level test sets can be generated. 

It is contemplated that the relational database used by configurator 130 to maintain 
test requirements and instmctions should provide for the specification of: (1) initial values, an 
operational range, a deadband, and a physical range for each I/O component to be tested to 
allow the testing of alarms when values are within and outside of such ranges; (2) 

1 0 standardized questions for prompting the operator to perform various functions or to provide 
responses; (3) sets of instuctions and questions for interactive testing (or possibly automatic 
testing) of the HMI portion of target CS 20; (4) parameters for PID loop testing; (5) 
parameters for indicator testing; (6) general target system requirements, as well as supporting 
any other tables required for proper functioning of SIMCart 10. Figure 7 provides a screen 

15 capture image of a simulator HMI screen wherein an operator is being prompted to select a 
test section to run. Figure 8 provides a screen capture image of a simulator HMI screen 
wherein an operator is being prompted whether to run a particular test or an entire test 
procedure. Figure 9 provides a screen capture of a simulator HMI screen wherein an operator 
is being prompted to perform a test. Figure 10 provides a screen capture of a simulator HMI 

20 screen wherein an operator is being prompted to enter the result of the test of Figure 9. Figure 
1 1 provides a screen capture of a simulator HML screen wherein an operator is being 
prompted to perform another test. 

Hardcopy device 140 is preferred to be a printer suitable for coimection to HMI 130, 
and for printing hardcopy of tests, test results, and audit information as well as other reports 
25 discussed herein. 

Wiring harnesses 150 may take on almost any form so long as they properly transmit 
I/O signals between SIMCart 10 and target CS 20. However, it is preferred that wiring 
harnesses 150 be chosen to facilitate the coupling of target CS 20 to SIMCart 10 and the 
simulation of the field wiring to which target CS 20 will be coupled in its operational 
30 enviroimient. It is contemplated that several different harnesses may be included with the 
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SIMCart 10 with each harness being designed to facilitate the coupling of SIMCart 10 to a 
particular type of target CS 20. The inclusion of such pre-configured harnesses is 
contemplated as facilitating the use of SIMCart 10 to test a variety of standard control 
systems such as Allen-Bradley PLC-5 controllers or Siemens S7 controllers.. 

5 Communication channel 1 60 is preferred to be a TCP/IP based Ethernet network and 

is preferred to be shared between SIMCart 10 and target CS 20 to allow flexible interaction 
between HMI 130, I/O simulator modules 120, HMI 230, PLC 270, and I/O interface 220. 
However, it is contemplated that other communication methods such as RS-232 interfaces, 
token ring networks, FDDI networks, proprietary control busses, etc. may also be used to 
10 provide a communication channel between one or more components of SIMCart 10 and target 
CS 20. 

As previously discussed, the HMI/configurator portion 130 of SIMCart 10 is useful 
both in the operation of SIMCart 10, but also as a detachable validation and/or training tool. 
It is contemplated that HMI/configurator 130 comprise the software and oiie or more 

1 5 databases necessary to allow it to perform its training and/or validation functions. Such 

functions might include, among others, the ability to control access by requiring an operator 
to log in, the ability to simulate a particular function and to test the capability of the target CS 
to respond to a sensor's entire range of input, the ability to prompt the operator to perform 
operations using the target CS HMI, and automatically performing tests against target CS 

20 when such tests do no require manual operations by an operator. 

Thus, a particular configurator embodiment is likely to have the ability to store and 
run multiple tests wherein each test comprises one or more steps. In running a particular test 
or sequence of test st^s, the configurator will prompt the operator to perform a function on 
the target CS whenever manual intervention by the operator is required, but will automatically 

25 (i.e. without operator action) run through any tests steps which do not require such manual 
intervention. Thus, to test a pump, the configurator may prompt an operator to tum on the 
pump, then, after the operator has indicated to the configurator that he has turned on the 
pump, the configurator will ask a question to verify proper operation of the pump such as 
"Did the pump indicator light tum on?" which the operator can either respond to affirmatively 

30 or negatively. If negatively, the configurator will prompt the operator to enter a comment as 
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to what response by the target CS was actually seen. During another step, the configurator 
may generate simulated events to which the target CS has automated responses which can be 
detected by the configurator and in which case the simulator will simply simulate the events 
and monitor the target CS's response. As an example, if a power voltage level exceeds a 
5 threshold amount the target CS may be required to cut off the source of power. Such a test 
would be performed by the simulator at the appropriate point in a test sequence by sending an 
over voltage signal to the target CS and monitoring the response of target CS to see if a power 
cutoff signal is sent. Test results, whether operator responses or automatically monitored 
events/values are also stored in one or more databases so that an exceptions report comparing 
10 actual target CS responses to expected results can be generated. 

It is contemplated that the configurator will comprise a scalable library of test 
databases and test functions utilizing the test databases to perform the test steps. Utilizing 
database tables to store tests and test parameters allows a tester to add new tests and/or test 
scenarios, and also to modify parameters for existing tests. Such scalable libraries and 
1 5 dynamic updates make for a much more robust and flexible system. { 

Figures 12-18 show some of the fields and data which might be included. The table of 
Figure 12 is an "Alarm" table and includes, possibly among others, the fields TagName, 
Initial, LL_Limit, L_Limit, H_Limit, HH_Limit, and Deadband. The table of Figure 13 is an 
"Alarm G" table and includes, possibly among others, the fields Akn__Ind, QNum, Type, and 

20 Question. The table of Figure 14 is an "Indication" table and includes, possibly among others, 
the fields JD, TagName, Description, EUZero, EUMax, and Eunit. The table of Figure 15 is 
an "PID Loop" table and includes, possibly among others, the fields PID__Number, 
Loop Desc, Process TagName, Min_EU, Max_EU, and EU_Name_SetPoint_TagName. The 
table of Figure 16 is an "Section IQ" table and includes, possibly among others, the fields ID, 

25 SectionNum, SectionStep, and Instmction. The table of Figure 17 is a "Section List" table and 
includes, possibly among others, the fields Nmn and Name, The table of Figure 18 is an 
"SysReqs" table and includes, possibly among others, the fields ID, Section, Requirement, 
and Question. 

SIMCart 10 is contemplated as being particularly well suited for a number of uses 
30 when taken to an operational facility and connected in place of all or part of the field wiring 
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including but not necessarily limited to: (1) testing existing logic for reaction to new 
scenarios; (2) testing new logic for operations; (3) training process operators prior to an 
operational campaign to a) score and validate operator readiness, b) identify deficient training 
areas, and c) ensure operational readiness as an overall team; (4) training process operators at 
5 the operational facility using by plugging SIMCart 10 in in place of the plant's actual sensors 
and actuators; (4) field trouble shooting of wiring and other field related problems. 

First Example Apolication 

An example application of SIMCart 10 is its in revalidating a PLC program used to 
manufacture a drug wherein the PLC does so by controlling ingredient weighing, heating, 

10 cooling, tank level control, pump control, and other portions of the manufacturing process. 
This example refers to target CS 20 as if it were the system to be re-vaUdated. Revahdation 
of the PLC program of target CS 20 would involve first using the SIMCart 10 to perform off- 
site testing of target CS 20, and then detaching the HMI/Configurator firom the rest of 
SIMCart 10 and taking it on-site in the field with target CS 20 when target CS 20 is installed 

15 at the drug production facility. 

During off-site/lab testing, I/O simulation modules 120 are used to provide an input to 
each of the PLC I/O channels via field I/O connectors 225. The SIMCart automatic 
initialization routines create a mapping between the target PLC and SIMCart I/O channels. A 
tester would log into the SIMCart configurator computer/HMI 130 (requiring operators to log 

20 in facilitates future auditing). After logging in, test databases are downloaded fi-om a 
requirements database that was estabUshed for target CS 20 at the project start. The test 
databases are then used to test all functions of the PLC, HMI and network including alarms, 
loops, and field wiring to satisfy the testing requirement contained in the test databases. Such 
testing is accompUshed via a series of automatic tests, as well as tests which prompt the 

25 operator to perform certain actions and to provide responses/inputs to the HMI after 
performing such actions. The testing of alarms includes the testing of deadbands, and 
appropriate low-low, low, high, and high-high alarm ranges as well as other types of data 
deltas. All data can be stored electronically with a date and time stamp as well as with other 
audit information as necessary. 
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Once off-site/lab testing is complete, the SIMCart configurator/HMI 130 is datached 
from theSIMCart and target CS 20 and taken to the field to be used onsite to test target CS 20 
once it is installed in the drug production facility. In the field, the SIMCart configurator 
provides a field tester with a series of tests related to field I/O and wiring connections. For 
5 some tests, the field tester is prompted by the SIMCart configurator to instruct a technician, 
possibly via cell-phone, to input signals to the system which will be passed to target CS 20 
via the field wiring. The SIMCart configurator 130 then prompts the field tester to enter 
responses answering questions related to the feedback HMI 230 of target CS 20 provided to 
the tester in response to the technician's inputs. All test questions and results are stored so as 
10 to allow a report of test results to be generated. 

Second Example Application 

Once test target CS 20 is rastalled in the drug production facility, SIMCart 10 can 
periodically be used to train process operators. Such training can be done on site, using the 
target CS 20 HMI by simply disconnecting target CS 20 from the plant's sensors and 

15 actuators, probably by disconnecting the field wiring, and connecting SIMCart 10 to target CS 
20 in place of the sensors and actuators. Once target CS 20 is operating with simulated I/O 
rather than live sensors and actuators, operators are free to interact with target CS 20 without 
any fear of consequences to the plant. When used in such a maimer, the test procedures used 
to validate target CS 20 may be used in training operators, or else SIMCart 20 may 

20 incorporate specific soflware and/or data for training operators. Such soflware and/or data 
may incorporate multi-media presentations such as training videos. SIMCart 20 may also 
work partially or completely independently of the operator so as to simulate events, track 
operator responses to the simulated events, and/or report on the quality of the operator's 
responses, without the operator having to interact with SIMCart 20 during training. 

25 Thus, specific embodiments and applications of devices and methods for plant control 

system testing have been disclosed. It should be apparent, however, to those skilled in the art 
that many more modifications besides those already described (including the methods shown 
in Figures 8-15) are possible without departing from the inventive concepts herein. The 
inventive subject matter, therefore, is not to be restricted except in the spirit of the appended 

30 claims. Moreover, in interpreting both the specification and the claims, all terms should be 
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interpreted in the broadest possible manner consistent with the context. In particular, the 
terms "comprises" and "comprising" should be interpreted as referring to elements, 
components, or steps in a non-exclusive manner, indicating that the referenced elements, 
components, or steps may be present, or utilized, or combined with other elements, 
5 components, or steps that are not expressly referenced. 
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CLAIMS 

What is claimed is: 

1 . A method of testing a plant control system comprising: 

providing a control system to be tested, the control system having a controUer-I/O 
communication channel and field I/O connectors; 

providing a test system; 

coupling the test system to the control system in a manner which allows the test 
system to commimicate with and drive the control system by sending and 
receiving signals via both the controUer-FO commimication channel and the field 
I/O connectors. 

2. The method of claim 1 further comprising: 
decoupling the test system firom the control system; 

at least partially installing the control system in a plant to be controlled; 

utilizing at least a portion of the test system to validate the operation of the control 
system, 

3. The method of claim 2 wherein validation of the control system involves coupling an 
I/O portion of the test system in place of at least some of the plant's sensors and 
actuators. 

4. The method of claim 2 wherein vaUdation is accomplished by the test system utilizing 
at least a portion of the test system to validate the operation of the control system by 
having the test system provide instructions and questions to one or more plant 
operators thereby instructing them to perform various operations and prompting them 
to enter a description as to how the control system responded to the operations, and 
recording any operator entered descriptions. 
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5. The method of claim 4 further comprising a step of causing the test system to generate 
a report indicating which operations where performed and what the control system 
response was for any operations performed. 

6, A method for testing a plant control system comprising: 

providing a plant control system to be tested, the control system comprising 
a controller, 
a sensor input port, 
an actuator output port, 

a series of communication segments communicatively coupling the sensor input 
port to the controller such that an input signal applied to the sensor input 
results in one or more signals traveling along each of the commimication 
segments so as to notify the controller of the applied input signal, and 

a series of communication segments communicatively coupling the controller to 
the actuator output port such that a control signal generated by the controller^ 
results in an output signal being applied to the actuator output port; 

providing a simulator, the simulator coupled to the control system at at least three 
points, wherein a first point is the sensor input port, a second point is a point from 
which data relating to the internal state of the controller can be obtained, and a 
third point is the actuator output port; 

causing the simulator to apply a signal to the first point and to subsequently 

obtain data on the internal state of the controller and to monitor the actuator output 
port for any appUed signals. 
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7. The method of claim 6 with the control system further comprising an I/O interface 
wherein coupling the simulator to the control system at the second point involves 
tying the simulator into a network used as a communication segment between the 
controller and the I/O interface. 

8. The method of claim 7 wherein the I/O interface comprises at least two analog/digital 
converters with a first, input converter converting an analog input signal applied to the 
sensor input by the simulator or sensor into a digital signal which is transmitted to the 
controller; and a second, output converter converting a digital signal received by the 
I/O interface from the controller into an analog signal which is transmitted to the 
simulator or actuator. 

9. The method of claim 8 wherein the simulator obtains data on the intemal state of the 
controller by establishing a network connection with the controller and requesting that 
the controller report its intemal state. 

10. A plant sensor and actuator simulator for use in testing a plant control system 
comprising: 

a configurator having a computer and software for entering and maintaing one or more 
databases including vaUdation requirements and associated test procedures, each 
test procedure comprising one or more tests, each test comprising at least one 
signal to be generated by the simulator and transmitted to the control system being 
tested, and at least one; 

a plurality of I/O simulator modules detachably coupled to the configurator, at least 
some of the I/O simulator modules comprising one or more A/D converters; 

commvmication channel coimectors for commimicatively coupling the configurator via 
a configurator network interface port to a network of which the controller of a 
control system to be tested is a part; 

field I/O coimectors for coupling the simulator to the field I/O connectors of a control 
system to be tested. 
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1 1 . The simulator of claim 1 0 wherein the configurator databases comprise data on a 
plurality of plant sensors such that, for each control system sensor input, the 
configurator identifies the range of signals which can be produced by a sensor and 
identifies a series of signals to be used in testing the control system response to signals 
within and without entire range of signals. 

12. A method for training process operators comprising: 

providing a plant comprising a HMI to a control system coupled to plant sensors and 
actuators and controlling a process; 

discoimecting all of the sensors and actuators firom the control system; 

connecting a simulator to the control system in place of the sensors and actuators; 

causing the simulator to simulate various plant events so that the operators can 
interact with the HMI as if such events were actually occuring. 

13. The method of claim 12 wherein the simulator comprises a database of events and 
preferred responses, monitors operator responses to simulated events by monitoring 
the control system's internal state and/or outputs, compares the monitored response for 
a particular event to the preferred response to determine whether the operator 
succeeded or failed to provide the preferred response, and reporting on the operator's 
successes and/or failures in responding to the simulated events. 
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FIG. 16 



FIG. 16A 



FIG. 16B 



FIG. 17 



Num 


Name 


1 


General 


2 


Input Manifold 


3 


Filtration 


4 


Column 


5 


Output 



SUBSTITUTE SHEET (RULE 26) 



wo 00/65361 



PCT/USOO/07962 



54/62 



C 



-a 

CD 

c 

CO 

O 
O 
M 

LO 
O 



o 
o 

CM 



E 

CO 

c 

CO 



O 

CO 
T3 

c 

CO 

c 



CD 



a. 

CO 

c 
o 

0) 
CO 

E 

3 



CO 
CD 

a 
o 

_o 

o 



CD 
O 

T— 

CD 
> 

e 

CD 
OJ 



CD 

E 

■o 
c 

CO 

o 

O 
M 

CO 

o 



o 
o 

CM 



<D 

E 

CD 
C 

cn 

CO 



o 

CD 
CO 

"O 
£= 
CO 

c 
o 

=3 



CD 
O 

CD 
> 

a 

CD 



CO 

■o 
c 

CO 

O 
O 
M 

CO 

o 



o 
o 

CM 

CD 

E 

CO 

c 

t3 

CD 
CO 

c: 

CO 

o 

4=i 



X 

E 
p 



CM 



CM 
CM 



X 

E 
2 

LL 

CO 
CM 



CO 
CD 

H- 
s 

C 

o 
o 

CM 



O 

CD 
> 

C 
CD 
Q. 



CO 

CD 



CD 
O 

O 
N 

N- 
O 



O 
O 
Csj 



CD 

E 

CD 
C 

CJ3 

B 

CD 
CO 

c 

CD 

c 
:§ 

=3 



E 
g 

lO 
CM 



CO 
CD 

s 
C 

o 

CD 
CM 



1^ 
O 

CD 
> 

CD 
CO 

a 
o 



CD 
0) 

c 

CD 

o 
o 

N 
o 



o 
o 

CM 
CD 

E 

CD 
C 

i5 

"o 
-SS 

CD 
CO 

c 

CD 



3 

JQ 



(D 

C 
CD 
Q. 



CD 
0) 

■a 
c 

CD 

o 
o 

M 

C30 

o 



o 
o 

CM 

5 

CD 

E 

CO 

c 
iS 
-92 

CD 
CO 

"O 

c 

CO 

c 
o 

CO 
0 



CM 



C 

o 

CO 
CM 



X 

E 
o 



CJ) 
CM 



o 

CO 



CM 



CM 



CM 



CM 



CM 



CM 



CM 



CM 



CM 



CM 



CM 



O 

o 
CO 



o 
o 

CM 

s 

CD 

E 

CO 

c 
ai 

o 
J2 

CD 
CO 

-o 
c 

CD 

c 



CM 
CO CO 



CM 



CM 



CD 

-o 

C 
CD 

o 
o 

M 

<y> 
o 



o 
o 

CM 
CD 

E 

CD 
C 

03 

CD 
CO 



o 

CD 

> 
c 

CD 
Q. 



CD 
C 



O 



CD 

CD 
CO 

O 



13 
CD 
0) 

-a 
c 

CD 

o 
o 

NJ 
o 



o 
o 

CM 



CD 

E 

CD 

c: 

cn 
iS 

cS 
-92 

CD 
CO 

"O 

CD 
C 

Z3 
.Q 

^— » 
CO 
CD 



CD 
> 

CD 
> 
d 
CD 

O 



■o 

CO 

a> 
c 

CO 

O 
O 
N 



o 
o 

CM 



CD 

E 

CO 

c 

cx 
iS 

ts 

-92 

(D 
CO 

c 

CO 

c 
o 

13 



CD 
> 

CO 

> 

CD 
CO 
O 
O 



T3 
CD 

2> 

X) 
CD 

O 

o 



o 
o 

CM 



CD 

E 

CO 

c 

CD 

c3 

CD 
CO 

■o 

CO 

c 
o 



T3 
CO 

c 

CO 

O 
O 
M 



o 
o 

CM 



CD 

E 

CD 
C 

c3 

0) 

CD 
CO 



CO 
CO 



c 
o 

CO 



E 
P 



CO 



o 

CO 
CO 



X 

E 
p 



CO 



c 
o 

o 
oo 

CO 



X 

E 
p 



C33 
CO 



CD 
O 



CO 
CD 
1- 



X 

E 
p 



CM 



X 

E 
p 



CD 
C 

:§ 

3 



CM 
O 



CD 
_> 

CD 
Q. 
O 



C 

o 

b 



E 

p 



CO 



in 



CM 



CM 



CM 



CM 



CM 



CM 



CM 



CM 



CM 



CM 



CM 



CM 



SUBSTITUTE SHEET (RULE 26) 



wo 00/65361 



PCT/USOO/07962 



55/62 



CO 

c 

CD 



O 
O 
CM 

> 

X 

<D 

E 

CO 

c 
cnj 

CD 



o 
o 

CM 
(D 

E 

CO 

c 

CO 



o 
o 

CsJ 

o 
E 

CO 

c 

CD 



o 
o 

CM 
CD 

E 

CD 

c 

CD 



o 
o 

CM 

E 

CO 

c 

CO 



O 

o 

CM 

E 

CO 

c 

CD 



CO 
O 

CD 
> 

CD 
> 

c: 

CD 
Q. 



CD 
O 



a 



CO 



GO 



CM 



CO 



CD 



00 



CM 



CO 



in 



CM 



CM 



CM 



CM 



CM 



CM 



CM 



CM 



CM 



CM 



CM 



CM 



CM 



CM 



CM 



CO 



CO 



CO 



CO 



CO 



SUBSTITUTE SHEET (RULE 26) 



wo 00/65361 



PCT/USOO/07962 



FIG. 18 



56/62 



ID 


Section 


Requirement 


Question 




G.1 


1 


Security requirements related to hardware: 
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Login requirements: 
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Protection areas: 
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Security level names: 
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Operating Conditions 
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FIG. 19 



providing a control system to be tested, the control system 
having a controller-l/O communication channel and field I/O 

connectors 



901 



providing a test system 



902 



coupling the test system to the control system In a manner 
which allows the test system to communicate with and drive 

the control system by sending and receiving signals via 
both the controller-l/O communication channel and the field 

I/O connectors 



903 



providing a control system to be tested, the control system 
having a controller-l/O communication channel and field I/O 

connectors 



901 



providing a test system I 902 



coupling the test system to the control system in a manner 
which allows the test system to communicate with and drive 

the control system by sending and receiving signals via 
both the controller-l/O communication channel and the field 

I/O connectors 



903 



decoupling the test system from the control system | 904 



installing the control system in a plant to be controlled | 905 



utilizing at least a portion of the test system to validate the 
operation of the control system 



FIG. 20 



906 
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FIG. 21 



providing a control system to be tested, the control system 
having a controller-l/O communication channel and field I/O 

connectors 



901 



providing a test system 



902 



coupling the test system to the control system in a manner 
which allows the test system to communicate with and drive 

the control system by sending and receiving signals via 
both the controller-l/O communication channel and the field 

I/O connectors 



903 



decoupling the test system from the control system "j 904 



installing the control system In a plant to be controlled I 905 



utilizing at least a portion of the test system to validate the 
operation of the control system by coupling an I/O portion of 
the test system in place of at least some of the plant's 
sensors and actuators 



906b 
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FIG. 22 



providing a control system to be tested, the control system 
having a controller-l/O communication channel and field I/O 

connectors 



901 



providing a test system 



902 



coupling the test system to the control system in a manner 
which allows the test system to communicate with and drive 

the control system by sending and receiving signals via 
both the controller-l/O communication channel and the field 

I/O connectors 



903 



decoupling the test system from the control system 



904 



installing the control system In a plant to be controlled 



905 



utilizing at least a portion of the test system to validate the 
operation of the control system by having the test system 
provide instructions and questions to one or more plant 
operators thereby instructing them to perform various 
operations and prompting them to enter a description as to 
how the control system responded to the operations, and 
recording any operator entered descriptions to any 
questions asked 



906c 



causing the test system to generate a report indicating 
which operations where performed, and what the control 
system response was for any operations performed 
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FIG. 23 



providing a plant control system to be tested, the control 
system comprising a controller, an I/O Interface, a sensor 

input port, an actuator output port, a series of 
communication segments communicatively coupling the 
sensor input port to the controller such that an input signal 
applied to the sensor input results in one or more signals 
traveling along each of the communication segments so as 
to notify the controller of the applied input signal, and a 
series of communication segments communicatively 
coupling the controller to the actuator output port such that 
a control signal generated by the controller results in an 
output signal being applied to the actuator output port 



911 



providing a simulator, the simulator coupled to the control 
system at at least three points, wherein a first point is the 
sensor input port, a second point is a control ler-l/O interface 
network access point from which data relating to the internal 
state of the controller can be obtained, and a third point is 
the actuator output port 



912 



causing the simulator to apply a signal to the first point and 

to subsequently 
obtain data on the internal state of the controller and to 
monitor the actuator output port for any applied signals 



913 
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providing a plant control system to be tested, the control 
system comprising a controller, a sensor, an actuator, and 
an I/O interface having a sensor input port and an actuator 

output port wherein the I/O interface and controller are 
networked together, the sensor is electrically coupled to the 
sensor input port, and the actuator is electrically coupled to 
the actuator output port 



921 



disconnecting the sensor and actuator from the sensor 
input port and actuator output port 



922 



providing a simulator 



923 



networking the simulator with the controller and the I/O 
interface and coupling the simulator to the sensor input port 
and the actuator output port 



924 



causing the simulator to transmit a signal to the controller 
via the sensor input port while monitoring signals 
transmitted by the controller to the actuator port 



925 



determining any changes in state in the controller caused 
by the transmitted signal 



926 



providing a control system to be tested 931 



providing simulated sensor inputs to the control system 932 



monitoring the control systems response to the simulated 933 
sensor inputs by both monitoring the control system's 
actuator outputs and querying the controller for information 
on its internal state 



FIG. 25 
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FIG. 26 



providing a plant control systenn to be tested, the control system comprising a 
controller, an input/output (I/O) interface in communication with the controller 
via a first communications channel, the I/O interface comprising a plurality of 
field I/O connectors; a plurality of sensors, and a plurality of actuators, wherein 
the plurality of sensors and the plurality of actuators are coupled to the field lO 
connectors via field wiring harnesses, and wherein the controller transmits 
signals to the actuators by transmitting a signal via the first communication 
channel to the I/O interface and the I/O interface transmitting a corresponding 
signal to the actuators via the field wiring harnesses, and the sensors send 
signals to the controller by sending a signal via the field wiring harnesses to 
the I/O interface and the I/O interface sending a corresponding signal to the 
controller via the first communication channel 



941 



providing a simulator capable of duplicating the signals sent by the sensors to 
the controller and capable of receiving the signals sent by the controller to the 

actuators 



942 



disconnecting at least some of the plurality of actuators and/or at least some 
of the plurality of sensors from the I/O interface 



943 



coupling the isimulator to the I/O interface in place of at least some of the 
disconnected actuators and/or sensors 



944 



causing the simulator to sending signals to the controller via the I/O interface 
wherein the sent signals have similar characteristics to signals which the 
disconnected sensors could send 



945 



causing the simulator to receive signals from the controller via the I/O 
interface wherein the received signals have similar characteristics to signals 
which would be received by the disconnected actuators 



946 



monitoring the signals received by the simulator from the controller via the 

I/O interface 



947 



comparing the received signals to an expected value stored in a 
requirements database 



948 
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